64 lines
2.3 KiB
YAML
64 lines
2.3 KiB
YAML
$schema: "http://json-schema.org/draft-06/schema#"
|
|
|
|
title: networksecurity v1beta1 ServerTlsPolicy export schema
|
|
description: A gcloud export/import command YAML validation schema.
|
|
type: object
|
|
additionalProperties: false
|
|
properties:
|
|
COMMENT:
|
|
type: object
|
|
description: User specified info ignored by gcloud import.
|
|
additionalProperties: false
|
|
properties:
|
|
template-id:
|
|
type: string
|
|
region:
|
|
type: string
|
|
description:
|
|
type: string
|
|
date:
|
|
type: string
|
|
version:
|
|
type: string
|
|
UNKNOWN:
|
|
type: array
|
|
description: Unknown API fields that cannot be imported.
|
|
items:
|
|
type: string
|
|
allowOpen:
|
|
description: |-
|
|
Determines if server allows plaintext connections. If set to true, server
|
|
allows plain text connections. By default, it is set to false. This
|
|
setting is not exclusive of other encryption modes. For example, if
|
|
`allow_open` and `mtls_policy` are set, server allows both plain text and
|
|
mTLS connections. See documentation of other encryption modes to confirm
|
|
compatibility. Consider using it if you wish to upgrade in place your
|
|
deployment to TLS while having mixed TLS and non-TLS traffic reaching port
|
|
:80.
|
|
type: boolean
|
|
description:
|
|
description: Free-text description of the resource.
|
|
type: string
|
|
labels:
|
|
description: Set of label tags associated with the resource.
|
|
$ref: LabelsValue.yaml
|
|
mtlsPolicy:
|
|
description: |-
|
|
Defines a mechanism to provision peer validation certificates for peer to
|
|
peer authentication (Mutual TLS - mTLS). If not specified, client
|
|
certificate will not be requested. The connection is treated as TLS and
|
|
not mTLS. If `allow_open` and `mtls_policy` are set, server allows both
|
|
plain text and mTLS connections.
|
|
$ref: MTLSPolicy.yaml
|
|
name:
|
|
description: |-
|
|
Name of the ServerTlsPolicy resource. It matches the pattern
|
|
`projects/*/locations/{location}/serverTlsPolicies/{server_tls_policy}`
|
|
type: string
|
|
serverCertificate:
|
|
description: |-
|
|
Defines a mechanism to provision server identity (public and private
|
|
keys). Cannot be combined with `allow_open` as a permissive mode that
|
|
allows both plain text and TLS is not supported.
|
|
$ref: GoogleCloudNetworksecurityV1beta1CertificateProvider.yaml
|